{"action":"Upgrade sentry-sdk to 1.45.1 or later.","affected":[{"fixed":"2.8.0","introduced":"2.0.0a1"},{"fixed":"1.45.1","introduced":"0"}],"component":"sentry-sdk","cve_ids":["CVE-2024-40647"],"ecosystem":"PyPI","epss":0.002,"exploited":false,"fixed_versions":["2.8.0","1.45.1"],"ghsa_id":"GHSA-g92j-qhmh-64v2","id":"tcs_01M5KFH7BHXCCYAV93QYDS4J1K","modified_at":"2026-07-07T17:56:58.426287284Z","published_at":"2024-07-18T17:18:46Z","references":["https://osv.dev/vulnerability/GHSA-g92j-qhmh-64v2","https://github.com/getsentry/sentry-python/security/advisories/GHSA-g92j-qhmh-64v2","https://nvd.nist.gov/vuln/detail/CVE-2024-40647","https://github.com/getsentry/sentry-python/pull/3251","https://github.com/getsentry/sentry-python/commit/763e40aa4cb57ecced467f48f78f335c87e9bdff","https://docs.python.org/3/library/subprocess.html","https://docs.sentry.io/platforms/python/integrations/default-integrations","https://docs.sentry.io/platforms/python/integrations/default-integrations/#stdlib","https://github.com/getsentry/sentry-python","https://github.com/getsentry/sentry-python/releases/tag/1.45.1","https://github.com/getsentry/sentry-python/releases/tag/2.8.0","https://lists.debian.org/debian-lts-announce/2026/06/msg00001.html"],"severity":{"label":"low","score":2.5},"sources":[{"source":"osv","source_id":"GHSA-g92j-qhmh-64v2","url":"https://osv.dev/vulnerability/GHSA-g92j-qhmh-64v2"}],"summary":"Sentry's Python SDK unintentionally exposes environment variables to subprocesses"}